GHSA-8m85-wqg7-c529

ghsaUSosv

SAP Approuter Vulnerable to HTTP Request Smuggling

view advisory published 2026-07-14Licence: CC-BY-4.0

Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to a high impact on confidentiality and availability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-27690US	—	0.68% (52nd)	—	2026-07-14
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchroniz…

references

External citations — patches, advisories, analysis.

https://me.sap.com/notes/3720138WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27690ADVISORY
https://url.sap/sapsecuritypatchdayWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan